Skip to content

chore(deps): bump the backend-minor-and-patch group across 1 directory with 13 updates - #819

Merged
Calebux merged 2 commits into
mainfrom
dependabot/npm_and_yarn/backend/backend-minor-and-patch-b8896500f3
Jun 23, 2026
Merged

chore(deps): bump the backend-minor-and-patch group across 1 directory with 13 updates#819
Calebux merged 2 commits into
mainfrom
dependabot/npm_and_yarn/backend/backend-minor-and-patch-b8896500f3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 22, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the backend-minor-and-patch group with 12 updates in the /backend directory:

Package From To
@sentry/node 10.54.0 10.60.0
@sentry/profiling-node 10.54.0 10.60.0
@supabase/supabase-js 2.106.2 2.108.2
bullmq 5.76.2 5.79.1
date-fns 4.1.0 4.4.0
google-auth-library 10.6.2 10.7.0
multer 2.1.1 2.2.0
node-cron 4.2.1 4.5.0
uuid 14.0.0 14.0.1
@typescript-eslint/eslint-plugin 8.60.0 8.62.0
eslint 10.4.0 10.5.0
jest 30.3.0 30.4.2

Updates @sentry/node from 10.54.0 to 10.60.0

Release notes

Sourced from @​sentry/node's releases.

10.60.0

Other Changes

  • feat(cloudflare): Add R2 bucket auto-instrumentation (#21327)
  • feat(core): Add bindScopeToEmitter to bind a scope to an event emitter (#21594)
  • feat(deps): Bump @​hapi/wreck from 18.1.0 to 18.1.2 (#21178)
  • fix(browser): Ensure url.full and http.url attributes have the same values on http.client spans (#21660)
  • fix(server-utils): Avoid directly importing tracingChannel for Node v18 compatibility (#21662)
  • fix(server-utils): Remove optional vite peer dependency (#21677)
  • chore: Add bundler-plugins to craft (#21701)
  • chore: Cleanup unused imports of @opentelemetry/core (#21679)
  • fix(bundler-plugins): Integration with monorepo build (#21479)
  • ref(core): Gate updateName() custom source on an OTel inference brand (#21649)
  • ref(core/opentelemetry): Move OTel span data inference from captureSpan to SentrySpanProcessor (#21648)
  • ref(node): Remove unused sql-common helper and @opentelemetry/core dep (#21688)
  • ref(node): Streamline kafkajs instrumentation (#21647)
  • ref(node): Streamline undici (node-fetch) instrumentation (#21650)
  • ref(vercel-edge): Drop unused @opentelemetry/semantic-conventions dependency (#21691)
  • ref(vercel-edge): Remove @opentelemetry/resources dependency (#21690)

Bundle size 📦

Path Size
@​sentry/browser 26.83 KB
@​sentry/browser - with treeshaking flags 25.3 KB
@​sentry/browser (incl. Tracing) 44.89 KB
@​sentry/browser (incl. Tracing + Span Streaming) 46.6 KB
@​sentry/browser (incl. Tracing, Profiling) 49.56 KB
@​sentry/browser (incl. Tracing, Replay) 83.18 KB
@​sentry/browser (incl. Tracing, Replay) - with treeshaking flags 73.02 KB
@​sentry/browser (incl. Tracing, Replay with Canvas) 87.76 KB
@​sentry/browser (incl. Tracing, Replay, Feedback) 100.12 KB
@​sentry/browser (incl. Feedback) 43.61 KB
@​sentry/browser (incl. sendFeedback) 31.5 KB
@​sentry/browser (incl. FeedbackAsync) 36.52 KB
@​sentry/browser (incl. Metrics) 27.87 KB
@​sentry/browser (incl. Logs) 28.11 KB
@​sentry/browser (incl. Metrics & Logs) 28.78 KB
@​sentry/react 28.59 KB
@​sentry/react (incl. Tracing) 47.14 KB
@​sentry/vue 31.86 KB
@​sentry/vue (incl. Tracing) 46.71 KB
@​sentry/svelte 26.85 KB

... (truncated)

Changelog

Sourced from @​sentry/node's changelog.

10.60.0

Other Changes

  • feat(cloudflare): Add R2 bucket auto-instrumentation (#21327)
  • feat(core): Add bindScopeToEmitter to bind a scope to an event emitter (#21594)
  • feat(deps): Bump @​hapi/wreck from 18.1.0 to 18.1.2 (#21178)
  • fix(browser): Ensure url.full and http.url attributes have the same values on http.client spans (#21660)
  • fix(server-utils): Avoid directly importing tracingChannel for Node v18 compatibility (#21662)
  • fix(server-utils): Remove optional vite peer dependency (#21677)
  • chore: Add bundler-plugins to craft (#21701)
  • chore: Cleanup unused imports of @opentelemetry/core (#21679)
  • fix(bundler-plugins): Integration with monorepo build (#21479)
  • ref(core): Gate updateName() custom source on an OTel inference brand (#21649)
  • ref(core/opentelemetry): Move OTel span data inference from captureSpan to SentrySpanProcessor (#21648)
  • ref(node): Remove unused sql-common helper and @opentelemetry/core dep (#21688)
  • ref(node): Streamline kafkajs instrumentation (#21647)
  • ref(node): Streamline undici (node-fetch) instrumentation (#21650)
  • ref(vercel-edge): Drop unused @opentelemetry/semantic-conventions dependency (#21691)
  • ref(vercel-edge): Remove @opentelemetry/resources dependency (#21690)

10.59.0

Important Changes

  • feat(react-router): Add support for React Router v8 (#21633)

    The SDK now supports React Router v8, in both the framework and SPA (@sentry/react) modes.

  • feat(react): Add version-agnostic React Router SPA exports (#21633)

    @sentry/react now exports version-agnostic wrappers for React Router v6+ SPA instrumentation. The new exports replace the version-specific V6/V7 variants, which are now deprecated:

    Deprecated New
    reactRouterV6BrowserTracingIntegration / V7 reactRouterBrowserTracingIntegration
    withSentryReactRouterV6Routing / V7 wrapReactRouterRouting
    wrapCreateBrowserRouterV6 / V7 wrapCreateBrowserRouter
    wrapCreateMemoryRouterV6 / V7 wrapCreateMemoryRouter
    wrapUseRoutesV6 / V7 wrapUseRoutes

    The deprecated exports continue to work and will be removed in the next major version.

... (truncated)

Commits
  • 4548afc test: Make bundler plugins tests work after release
  • 499c327 chore: fix yarn.lock
  • 4d26c19 release: 10.60.0
  • cc7dea4 Merge pull request #21703 from getsentry/prepare-release/10.60.0
  • bcef5d9 meta(changelog): Update changelog for 10.60.0
  • 8285066 chore: Add bundler-plugins to craft (#21701)
  • b953c6f fix(browser): Ensure url.full and http.url attributes have the same value...
  • b54777a ref(vercel-edge): Drop unused @opentelemetry/semantic-conventions dependenc...
  • 2e29cd3 ref(vercel-edge): Remove @opentelemetry/resources dependency (#21690)
  • c5e245f ref(node): Remove unusued sql-common helper and @opentelemetry/core dep (#2...
  • Additional commits viewable in compare view

Updates @sentry/profiling-node from 10.54.0 to 10.60.0

Release notes

Sourced from @​sentry/profiling-node's releases.

10.60.0

Other Changes

  • feat(cloudflare): Add R2 bucket auto-instrumentation (#21327)
  • feat(core): Add bindScopeToEmitter to bind a scope to an event emitter (#21594)
  • feat(deps): Bump @​hapi/wreck from 18.1.0 to 18.1.2 (#21178)
  • fix(browser): Ensure url.full and http.url attributes have the same values on http.client spans (#21660)
  • fix(server-utils): Avoid directly importing tracingChannel for Node v18 compatibility (#21662)
  • fix(server-utils): Remove optional vite peer dependency (#21677)
  • chore: Add bundler-plugins to craft (#21701)
  • chore: Cleanup unused imports of @opentelemetry/core (#21679)
  • fix(bundler-plugins): Integration with monorepo build (#21479)
  • ref(core): Gate updateName() custom source on an OTel inference brand (#21649)
  • ref(core/opentelemetry): Move OTel span data inference from captureSpan to SentrySpanProcessor (#21648)
  • ref(node): Remove unused sql-common helper and @opentelemetry/core dep (#21688)
  • ref(node): Streamline kafkajs instrumentation (#21647)
  • ref(node): Streamline undici (node-fetch) instrumentation (#21650)
  • ref(vercel-edge): Drop unused @opentelemetry/semantic-conventions dependency (#21691)
  • ref(vercel-edge): Remove @opentelemetry/resources dependency (#21690)

Bundle size 📦

Path Size
@​sentry/browser 26.83 KB
@​sentry/browser - with treeshaking flags 25.3 KB
@​sentry/browser (incl. Tracing) 44.89 KB
@​sentry/browser (incl. Tracing + Span Streaming) 46.6 KB
@​sentry/browser (incl. Tracing, Profiling) 49.56 KB
@​sentry/browser (incl. Tracing, Replay) 83.18 KB
@​sentry/browser (incl. Tracing, Replay) - with treeshaking flags 73.02 KB
@​sentry/browser (incl. Tracing, Replay with Canvas) 87.76 KB
@​sentry/browser (incl. Tracing, Replay, Feedback) 100.12 KB
@​sentry/browser (incl. Feedback) 43.61 KB
@​sentry/browser (incl. sendFeedback) 31.5 KB
@​sentry/browser (incl. FeedbackAsync) 36.52 KB
@​sentry/browser (incl. Metrics) 27.87 KB
@​sentry/browser (incl. Logs) 28.11 KB
@​sentry/browser (incl. Metrics & Logs) 28.78 KB
@​sentry/react 28.59 KB
@​sentry/react (incl. Tracing) 47.14 KB
@​sentry/vue 31.86 KB
@​sentry/vue (incl. Tracing) 46.71 KB
@​sentry/svelte 26.85 KB

... (truncated)

Changelog

Sourced from @​sentry/profiling-node's changelog.

10.60.0

Other Changes

  • feat(cloudflare): Add R2 bucket auto-instrumentation (#21327)
  • feat(core): Add bindScopeToEmitter to bind a scope to an event emitter (#21594)
  • feat(deps): Bump @​hapi/wreck from 18.1.0 to 18.1.2 (#21178)
  • fix(browser): Ensure url.full and http.url attributes have the same values on http.client spans (#21660)
  • fix(server-utils): Avoid directly importing tracingChannel for Node v18 compatibility (#21662)
  • fix(server-utils): Remove optional vite peer dependency (#21677)
  • chore: Add bundler-plugins to craft (#21701)
  • chore: Cleanup unused imports of @opentelemetry/core (#21679)
  • fix(bundler-plugins): Integration with monorepo build (#21479)
  • ref(core): Gate updateName() custom source on an OTel inference brand (#21649)
  • ref(core/opentelemetry): Move OTel span data inference from captureSpan to SentrySpanProcessor (#21648)
  • ref(node): Remove unused sql-common helper and @opentelemetry/core dep (#21688)
  • ref(node): Streamline kafkajs instrumentation (#21647)
  • ref(node): Streamline undici (node-fetch) instrumentation (#21650)
  • ref(vercel-edge): Drop unused @opentelemetry/semantic-conventions dependency (#21691)
  • ref(vercel-edge): Remove @opentelemetry/resources dependency (#21690)

10.59.0

Important Changes

  • feat(react-router): Add support for React Router v8 (#21633)

    The SDK now supports React Router v8, in both the framework and SPA (@sentry/react) modes.

  • feat(react): Add version-agnostic React Router SPA exports (#21633)

    @sentry/react now exports version-agnostic wrappers for React Router v6+ SPA instrumentation. The new exports replace the version-specific V6/V7 variants, which are now deprecated:

    Deprecated New
    reactRouterV6BrowserTracingIntegration / V7 reactRouterBrowserTracingIntegration
    withSentryReactRouterV6Routing / V7 wrapReactRouterRouting
    wrapCreateBrowserRouterV6 / V7 wrapCreateBrowserRouter
    wrapCreateMemoryRouterV6 / V7 wrapCreateMemoryRouter
    wrapUseRoutesV6 / V7 wrapUseRoutes

    The deprecated exports continue to work and will be removed in the next major version.

... (truncated)

Commits
  • 4548afc test: Make bundler plugins tests work after release
  • 499c327 chore: fix yarn.lock
  • 4d26c19 release: 10.60.0
  • cc7dea4 Merge pull request #21703 from getsentry/prepare-release/10.60.0
  • bcef5d9 meta(changelog): Update changelog for 10.60.0
  • 8285066 chore: Add bundler-plugins to craft (#21701)
  • b953c6f fix(browser): Ensure url.full and http.url attributes have the same value...
  • b54777a ref(vercel-edge): Drop unused @opentelemetry/semantic-conventions dependenc...
  • 2e29cd3 ref(vercel-edge): Remove @opentelemetry/resources dependency (#21690)
  • c5e245f ref(node): Remove unusued sql-common helper and @opentelemetry/core dep (#2...
  • Additional commits viewable in compare view

Updates @supabase/supabase-js from 2.106.2 to 2.108.2

Release notes

Sourced from @​supabase/supabase-js's releases.

v2.108.2

2.108.2 (2026-06-15)

🩹 Fixes

  • auth: preserve valid session on refresh failure and cooldown repeat failures (#2436)
  • realtime: clarify httpSend() 404 error and server migration note (#2444)
  • release: pin Deno and bound JSR publish to survive stranded-task hangs (#2439)
  • release: restore JSR publish flags and enable for beta (#2440)

❤️ Thank You

v2.108.2-canary.5

2.108.2-canary.5 (2026-06-15)

This was a version bump only, there were no code changes.

v2.108.2-canary.4

2.108.2-canary.4 (2026-06-12)

🩹 Fixes

  • realtime: clarify httpSend() 404 error and server migration note (#2444)

❤️ Thank You

v2.108.2-canary.3

2.108.2-canary.3 (2026-06-11)

This was a version bump only, there were no code changes.

v2.108.2-canary.2

2.108.2-canary.2 (2026-06-11)

🩹 Fixes

  • release: restore JSR publish flags and enable for beta (#2440)

❤️ Thank You

v2.108.2-canary.1

2.108.2-canary.1 (2026-06-11)

🩹 Fixes

... (truncated)

Changelog

Sourced from @​supabase/supabase-js's changelog.

2.108.2 (2026-06-15)

This was a version bump only for @​supabase/supabase-js to align it with other projects, there were no code changes.

2.108.0 (2026-06-08)

This was a version bump only for @​supabase/supabase-js to align it with other projects, there were no code changes.

2.107.0 (2026-06-02)

🚀 Features

  • auth: remove navigator.locks-based mutex; introduce commit guard + dispose() (#2392)
  • supabase: update X-Client-Info to structured metadata format (#2359)
  • realtime: allow httpSend to send binary payload (#2400)

❤️ Thank You

Commits
  • 76f3f02 test(auth): add passkey unit and e2e coverage (#2442)
  • 65fafe5 chore(release): version 2.108.0 changelogs (#2433)
  • 57014e1 chore(release): version 2.107.0 changelogs (#2421)
  • 54ec2b6 feat(auth): remove navigator.locks-based mutex; introduce commit guard + disp...
  • 3397c92 feat(supabase): update X-Client-Info to structured metadata format (#2359)
  • 335207f feat(realtime): allow httpSend to send binary payload (#2400)
  • 42f12dd docs(repo): ship per-package AGENTS.md and migrations via npm (#2397)
  • b200b74 chore(release): version 2.106.2 changelogs (#2396)
  • See full diff in compare view

Updates bullmq from 5.76.2 to 5.79.1

Release notes

Sourced from bullmq's releases.

v5.79.1

5.79.1 (2026-06-21)

Bug Fixes

  • node-redis: accept plain createClient result without cast (#4201) (#4209) (1aefd5b)

v5.79.0

5.79.0 (2026-06-18)

v5.78.1

5.78.1 (2026-06-13)

Bug Fixes

  • scheduler: fail stalled jobs if scheduler does not longer exist (elixir) (rust) (#4222) (d1fcda5)

v5.78.0

5.78.0 (2026-06-02)

Features

  • rust: initial implementation of rust support (#4200) (38798cc)

v5.77.7

5.77.7 (2026-06-01)

Bug Fixes

  • deps: update dependency msgpackr to v2.0.2 [security] (#4202) (fbe04af)

v5.77.6

5.77.6 (2026-05-27)

Bug Fixes

  • types: change NodeRedisRawClient to be node-redis compliant (#4195) (81709e4)

v5.77.5

5.77.5 (2026-05-27)

Bug Fixes

  • connection: handle cluster reconnection with timeouts (#4186) (411690e)

... (truncated)

Commits
  • 1aefd5b fix(node-redis): accept plain createClient result without cast (#4201) (#4209)
  • dab9d19 chore(deps): update eslint to v8.61.1 [security] (#4213)
  • c343c21 ci(release): consider slashes when ignoring commits (#4228)
  • 3f15ce1 chore(release): 5.79.0 (#4227)
  • eb9ae1d feat: expand Queue/Job/Worker API parity with Node.js BullMQ [rust] (#4219)
  • d17efe1 chore(deps): bump the npm_and_yarn group across 4 directories with 5 updates ...
  • 643bb5d chore(release): 5.78.1 (#4223)
  • b944569 chore(release): vex1.3.3 (#4224)
  • d1fcda5 fix(scheduler): fail stalled jobs if scheduler does not longer exist (elixir)...
  • 3db7b21 chore(deps): bump shell-quote (#4218)
  • Additional commits viewable in compare view

Updates date-fns from 4.1.0 to 4.4.0

Release notes

Sourced from date-fns's releases.

v4.4.0

This release revisits the approach to CDN usage and introduces a new package, @date-fns/cdn and deprecates the date-fns CDN scripts. It allowed reducing the zipped package size from 5.83 MB down to 3.96 MB without introducing any breaking changes.

In v5.0.0-alpha.0 where CDN scripts are completely removed from date-fns the change is more significant and brings the zipped package size down to 2.89 MB.

It is just the first step in optimizing the package size. Expect further size reduction in the future v4 and v5 versions.

Changed

  • DEPRECATED: The date-fns CDN scripts are now deprecated and will be removed in the next major release. Please switch to the new @date-fns/cdn package for CDN usage.

  • Removed CDN source maps to reduce the package size. If you rely on them, please switch to the new @date-fns/cdn package that still includes them.

v4.3.0

Kudos to @​ImRodry and @​puneetdixit200 for their contributions.

Fixed

v4.2.1

Fixed

  • Fixed type definitions missing in v4.2.0 due to TypeScript misconfiguration.

v4.2.0

This is a minor release in all senses, it only includes documentation updates (first of many) that points to the new You Don't Need date-fns* page.

* Not really

Changed

  • Added Temporal API references to the JSDoc annotations of add, addBusinessDays, and addDays.
Commits
  • cd53d25 Promote to v4.4.0
  • d948ec1 Preserve but deprecate CDN versions for v4, set up v5 with polyfills
  • ee65753 Add root mise :format task
  • 9f5bdf5 Add positional argument to test/smoke.sh script
  • 651ead6 Split CDN bundles into separate @​date-fns/cdn package
  • 224c1a2 Deprecate type tests as attw hangs on date-fns package
  • 7bb2842 Switch PACKAGE_OUTPUT_PATH to --dist flag in the package build script
  • b6ad5ac Add flags to control package build script
  • 424a783 Fix docs release after moving to monorepo setup
  • f95bcf1 (docs): Add missing tsx dependency
  • Additional commits viewable in compare view

Updates google-auth-library from 10.6.2 to 10.7.0

Changelog

Sourced from google-auth-library's changelog.

Changelog

npm history

Commits

Updates multer from 2.1.1 to 2.2.0

Release notes

Sourced from multer's releases.

v2.2.0

Important

What's Changed

New Contributors

Full Changelog: expressjs/multer@v2.1.1...v2.2.0

Changelog

Sourced from multer's changelog.

2.2.0

Commits
  • 2e2af08 2.2.0 (#1412)
  • a192b52 feat: add fieldNestingDepth limit option
  • 9c801c7 fix: clean up in-progress disk writes on abort
  • 0adb21d ci: add Node 26 to test matrix (#1404)
  • f5e17c3 chore(deps): bump actions/checkout from 6.0.2 to 6.0.3 (#1410)
  • de1fefd chore(deps): bump github/codeql-action from 4.32.4 to 4.36.1 (#1409)
  • 67abfc8 chore(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 (#1397)
  • See full diff in compare view

Updates node-cron from 4.2.1 to 4.5.0

Release notes

Sourced from node-cron's releases.

v4.5.0

Added

  • lastRun() introspection getter on ScheduledTask: returns { date, result } after a successful execution, { date, error } after a failed one, or null before the first run.
  • Extended day-of-week tokens: <weekday>#<nth> (nth weekday of the month, e.g. 1#1 for the first Monday) and <weekday>L (last weekday of the month, e.g. 5L for the last Friday).

Performance

  • Cache Intl.DateTimeFormat instances per timezone instead of rebuilding on every call.
  • Parse the cron expression once per TimeMatcher instead of re-parsing in MatcherWalker.
  • Compute the GMT offset lazily (only when formatting ISO strings, not during the next-run search).
  • Replace crypto.randomBytes with crypto.randomUUID for internal ID generation.
  • Skip setTimeout jitter wrapper when maxRandomDelay is zero.
  • Bundle dist into flat files instead of preserving the module tree (reduces import time).

Fixed

  • Flaky should schedule a task test: poll for the first execution instead of asserting an exact count after a fixed sleep.

Changed

  • Renamed internal functions interprete to interpret and appendSeccondExpression to appendSecondExpression.
  • Rewritten README and package metadata to surface scheduling capabilities (overlap prevention, distributed coordination, background tasks).

v4.4.1

Patch release.

Changed

  • Renamed the distributedTtl task option to distributedLease (same meaning: the safety lease, in ms, for lease-based run coordinators). distributedTtl was the only abbreviation in the options API and shipped just days ago in 4.4.0, so it's removed without an alias. If you adopted distributedTtl from 4.4.0, rename it to distributedLease. (#551)

Full Changelog: node-cron/node-cron@v4.4.0...v4.4.1

v4.4.0

Features

  • Distributed run coordination — opt-in distributed: true runs a task on a single instance per fire across a fleet (the #477 use case). Ships a built-in NODE_CRON_RUN env-var default (one designated runner, no dependencies) and a pluggable RunCoordinator (via setRunCoordinator, or the per-task runCoordinator option) for high-availability, per-fire coordination (e.g. a Redis lock). Adds the distributedTtl option and an execution:skipped event carrying a reason ('not-elected' | 'coordinator-error'). Works for inline and background tasks. (#549, closes #477)
  • Task introspection on ScheduledTask: getNextRuns(n) (preview the next N run times), match(date), msToNext(), isBusy(), runsLeft() and getPattern(). (#547)
  • cron.parse(expression) and cron.validateDetailed(expression) — decompose an expression into its fields, or get every field-level problem (without throwing) for tooling and richer error messages. (#548)

Fixes

  • getNextMatch no longer scans every time of day on a day that matches the day-of-month but not the weekday. A dense expression constrained by both (e.g. * * * 15 * 1) could take minutes to resolve; it is now instant. (#542)

Internal

  • Cleanups with no public API change: fixed the milisecond → millisecond spelling and the convertion/ → conversion/ directory name. (#543)

Docs

  • New Distributed Coordination guide, plus pages for task introspection and parse/validateDetailed, at nodecron.com.

Full Changelog: node-cron/node-cron@v4.3.0...v4.4.0

v4.3.0

Features

  • L (last day of month) in the day-of-month field — e.g. 0 0 12 L * *, leap-year aware, and combinable with explicit days (15,L). (#396, closes #147 — thanks @​antonidasyang)
  • missedExecutionTolerance option (ms, default 1000): a heartbeat that wakes a little late still runs its slot instead of being reported as missed. Always capped to the gap to the next slot. (#534, closes #485)
  • startTimeout option for background tasks (ms, default 5000). (#535)

... (truncated)

Changelog

Sourced from node-cron's changelog.

[4.5.0] - 2026-06-21

Added

  • lastRun() introspection getter on ScheduledTask: returns { date, result } after a successful execution, { date, error } after a failed one, or null before the first run. (#557)
  • Extended day-of-week tokens: <weekday>#<nth> (nth weekday of the month, e.g. 1#1 for the first Monday) and <weekday>L (last weekday of the month, e.g. 5L for the last Friday). (#560)

Performance

  • Cache Intl.DateTimeFormat instances per timezone instead of rebuilding on every call. (#561)
  • Parse the cron expression once per TimeMatcher instead of re-parsing in MatcherWalker. (#562)
  • Compute the GMT offset lazily (only when formatting ISO strings, not during the next-run search). (#563)
  • Replace crypto.randomBytes with crypto.randomUUID for internal ID generation. (#564)
  • Skip setTimeout jitter wrapper when maxRandomDelay is zero. (#565)
  • Bundle dist into flat files instead of preserving the module tree (reduces import time). (#566)

Fixed

  • Flaky should schedule a task test: poll for the first execution instead of asserting an exact count after a fixed sleep.

Changed

  • Renamed internal functions interprete to interpret and appendSeccondExpression to appendSecondExpression. (#567)
  • Rewritten README and package metadata to surface scheduling capabilities (overlap prevention, distributed coordination, background tasks). (#568)

[4.4.1] - 2026-06-18

Changed

  • Renamed the distributedTtl option to distributedLease (same meaning: the safety lease, in ms, for lease-based coordinators). The old name was the only abbreviation in the options API; the new one groups with distributed. distributedTtl was introduced in 4.4.0 and is removed without an alias.

[4.4.0] - 2026-06-17

Added

  • Task introspection on ScheduledTask: getNextRuns(n) (preview the next N run times), match(date), msToNext(), isBusy(), runsLeft() and getPattern(). (#547)
  • cron.parse(expression) and cron.validateDetailed(expression): decompose an expression into its fields, or get every field-level problem (without throwing) for tooling and richer error messages. (#548)

... (truncated)

Commits
  • cd9a5a7 chore(release): 4.5.0 (#569)
  • fbdd883 Rewrite README to surface scheduling capabilities (#568)
  • c80a396 perf(build): bundle dist into flat files instead of preserving modules (#566)
  • b71b9b1 Fix typos in internal function names (#567)
  • 7c5015c perf(id): drop crypto.randomBytes from internal id generation (#564)
  • dd0a2a9 perf(pattern): parse cron expression once per TimeMatcher (#562)
  • cf69f32 perf(time): cache Intl.DateTimeFormat instances per timezone (#561)
  • dad56e1 perf(runner): run inline when no random delay is configured (#565)
  • a309d5f perf(time): compute the GMT offset lazily (#563)
  • c2db9d1 feat: support extended day-of-week tokens (# nth weekday and L last weekday) ...
  • Additional commits viewable in compare view

Updates uuid from 14.0.0 to 14.0.1

Release notes

Sourced from uuid's releases.

v14.0.1

14.0.1 (2026-06-20)

Bug Fixes

  • add types condition to node export for moduleResolution bundler (#961) (27ffae5)
Changelog

Sourced from uuid's changelog.

14.0.1 (2026-06-20)

Bug Fixes

  • add types condition to node export for moduleResolution bundler (#961) (27ffae5)
Commits
Install script changes

This version modifies prepare script that runs during installation. Review the package contents before updating.


Updates `@types...

Description has been truncated

@dependabot @github

dependabot Bot commented on behalf of github Jun 22, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot dependabot Bot added the Backend label Jun 22, 2026
@dependabot
dependabot Bot requested a review from Calebux as a code owner June 22, 2026 06:29
@dependabot dependabot Bot added the Backend label Jun 22, 2026
@dependabot
chore(deps): bump the backend-minor-and-patch group across 1 director…
0c7db79 
…y with 13 updates

Bumps the backend-minor-and-patch group with 12 updates in the /backend directory:

| Package | From | To |
| --- | --- | --- |
| [@sentry/node](https://github.com/getsentry/sentry-javascript) | `10.54.0` | `10.60.0` |
| [@sentry/profiling-node](https://github.com/getsentry/sentry-javascript) | `10.54.0` | `10.60.0` |
| [@supabase/supabase-js](https://github.com/supabase/supabase-js/tree/HEAD/packages/core/supabase-js) | `2.106.2` | `2.108.2` |
| [bullmq](https://github.com/taskforcesh/bullmq) | `5.76.2` | `5.79.1` |
| [date-fns](https://github.com/date-fns/date-fns) | `4.1.0` | `4.4.0` |
| [google-auth-library](https://github.com/googleapis/google-cloud-node-core/tree/HEAD/packages/google-auth-library-nodejs) | `10.6.2` | `10.7.0` |
| [multer](https://github.com/expressjs/multer) | `2.1.1` | `2.2.0` |
| [node-cron](https://github.com/node-cron/node-cron) | `4.2.1` | `4.5.0` |
| [uuid](https://github.com/uuidjs/uuid) | `14.0.0` | `14.0.1` |
| [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) | `8.60.0` | `8.62.0` |
| [eslint](https://github.com/eslint/eslint) | `10.4.0` | `10.5.0` |
| [jest](https://github.com/jestjs/jest/tree/HEAD/packages/jest) | `30.3.0` | `30.4.2` |



Updates `@sentry/node` from 10.54.0 to 10.60.0
- [Release notes](https://github.com/getsentry/sentry-javascript/releases)
- [Changelog](https://github.com/getsentry/sentry-javascript/blob/develop/CHANGELOG.md)
- [Commits](getsentry/sentry-javascript@10.54.0...10.60.0)

Updates `@sentry/profiling-node` from 10.54.0 to 10.60.0
- [Release notes](https://github.com/getsentry/sentry-javascript/releases)
- [Changelog](https://github.com/getsentry/sentry-javascript/blob/develop/CHANGELOG.md)
- [Commits](getsentry/sentry-javascript@10.54.0...10.60.0)

Updates `@supabase/supabase-js` from 2.106.2 to 2.108.2
- [Release notes](https://github.com/supabase/supabase-js/releases)
- [Changelog](https://github.com/supabase/supabase-js/blob/master/packages/core/supabase-js/CHANGELOG.md)
- [Commits](https://github.com/supabase/supabase-js/commits/v2.108.2/packages/core/supabase-js)

Updates `bullmq` from 5.76.2 to 5.79.1
- [Release notes](https://github.com/taskforcesh/bullmq/releases)
- [Commits](taskforcesh/bullmq@v5.76.2...v5.79.1)

Updates `date-fns` from 4.1.0 to 4.4.0
- [Release notes](https://github.com/date-fns/date-fns/releases)
- [Commits](date-fns/date-fns@v4.1.0...v4.4.0)

Updates `google-auth-library` from 10.6.2 to 10.7.0
- [Release notes](https://github.com/googleapis/google-cloud-node-core/releases)
- [Changelog](https://github.com/googleapis/google-cloud-node-core/blob/main/packages/google-auth-library-nodejs/CHANGELOG.md)
- [Commits](https://github.com/googleapis/google-cloud-node-core/commits/HEAD/packages/google-auth-library-nodejs)

Updates `multer` from 2.1.1 to 2.2.0
- [Release notes](https://github.com/expressjs/multer/releases)
- [Changelog](https://github.com/expressjs/multer/blob/main/CHANGELOG.md)
- [Commits](expressjs/multer@v2.1.1...v2.2.0)

Updates `node-cron` from 4.2.1 to 4.5.0
- [Release notes](https://github.com/node-cron/node-cron/releases)
- [Changelog](https://github.com/node-cron/node-cron/blob/main/CHANGELOG.md)
- [Commits](node-cron/node-cron@v4.2.1...v4.5.0)

Updates `uuid` from 14.0.0 to 14.0.1
- [Release notes](https://github.com/uuidjs/uuid/releases)
- [Changelog](https://github.com/uuidjs/uuid/blob/main/CHANGELOG.md)
- [Commits](uuidjs/uuid@v14.0.0...v14.0.1)

Updates `@typescript-eslint/eslint-plugin` from 8.60.0 to 8.62.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.62.0/packages/eslint-plugin)

Updates `@typescript-eslint/parser` from 8.60.0 to 8.62.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.62.0/packages/parser)

Updates `eslint` from 10.4.0 to 10.5.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v10.4.0...v10.5.0)

Updates `jest` from 30.3.0 to 30.4.2
- [Release notes](https://github.com/jestjs/jest/releases)
- [Changelog](https://github.com/jestjs/jest/blob/main/CHANGELOG.md)
- [Commits](https://github.com/jestjs/jest/commits/v30.4.2/packages/jest)

---
updated-dependencies:
- dependency-name: "@sentry/node"
  dependency-version: 10.59.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-minor-and-patch
- dependency-name: "@sentry/profiling-node"
  dependency-version: 10.59.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-minor-and-patch
- dependency-name: "@supabase/supabase-js"
  dependency-version: 2.108.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-minor-and-patch
- dependency-name: "@typescript-eslint/eslint-plugin"
  dependency-version: 8.61.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: backend-minor-and-patch
- dependency-name: "@typescript-eslint/parser"
  dependency-version: 8.61.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: backend-minor-and-patch
- dependency-name: bullmq
  dependency-version: 5.79.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-minor-and-patch
- dependency-name: date-fns
  dependency-version: 4.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-minor-and-patch
- dependency-name: eslint
  dependency-version: 10.5.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: backend-minor-and-patch
- dependency-name: google-auth-library
  dependency-version: 10.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-minor-and-patch
- dependency-name: jest
  dependency-version: 30.4.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: backend-minor-and-patch
- dependency-name: multer
  dependency-version: 2.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-minor-and-patch
- dependency-name: node-cron
  dependency-version: 4.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-minor-and-patch
- dependency-name: uuid
  dependency-version: 14.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: backend-minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/backend/backend-minor-and-patch-b8896500f3 branch from d5d8a16 to 0c7db79 Compare June 23, 2026 19:44
Codex
Merge remote-tracking branch 'origin/main' into dependabot/npm_and_ya…
e5723ef 
…rn/backend/backend-minor-and-patch-b8896500f3
@Calebux
Calebux merged commit 44b2141 into main Jun 23, 2026
17 of 24 checks passed
@Calebux
Calebux deleted the dependabot/npm_and_yarn/backend/backend-minor-and-patch-b8896500f3 branch June 23, 2026 19:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@Calebux Calebux Awaiting requested review from Calebux Calebux is a code owner

Assignees

No one assigned

Labels

Backend

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@Calebux